Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File:                     KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier:          QsftRaqGJluZVDZN9aXDeaBB4TQQ3MfVyYABbmmuFzk=
Subject key identifier:   BA:DE:E2:33:B3:99:47:FD:14:49:4C:02:FB:22:A4:20:F8:DA:32:08
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer:       /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number:          F3
Signing time:             Fri 17 Apr 2026 05:59:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:59:33 +0000
Manifest next update:     Fri 24 Apr 2026 05:59:33 +0000
Files and hashes:         1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: kSbm+nw7cDflJdesXy4AktzUJAD1343eIYlLqrxsLbg=)
                          2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
        Validity
            Not Before: Apr 17 05:59:33 2026 GMT
            Not After : Apr 24 05:59:33 2026 GMT
        Subject: CN=69e1cc46-c8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:9f:b1:c7:c4:76:fe:17:69:51:e3:45:a2:
                    32:e2:89:f9:1e:fd:21:80:3a:a4:a8:a7:2f:a2:b7:
                    b8:28:e2:7f:5b:a4:1c:31:21:3f:b1:de:77:aa:ee:
                    34:39:d6:48:e0:8b:80:33:3e:71:ec:77:30:62:a0:
                    e5:86:f7:e8:8b:63:4f:bb:1c:3b:b9:30:7a:31:a3:
                    df:2c:c0:ba:76:d9:ef:2c:5a:48:fe:b4:af:08:02:
                    7d:0d:f5:d8:d4:07:25:4c:a8:5a:60:a8:85:68:d8:
                    2e:f2:29:6f:9f:bf:bd:74:16:78:ba:4b:1b:1c:a6:
                    db:4f:81:2f:3b:6a:01:fc:96:37:94:20:9f:f5:09:
                    43:70:53:03:d1:35:19:1d:60:cf:49:b0:7d:36:79:
                    15:21:0f:da:ec:dd:3d:7e:e2:eb:8d:69:67:c3:93:
                    28:e0:22:2c:da:40:a6:64:3d:95:61:7e:52:a1:0f:
                    73:de:1c:e2:f8:6c:a5:8d:38:9d:a0:1c:fa:27:74:
                    25:df:bd:39:2a:c7:2b:e4:ac:24:92:01:81:87:16:
                    f0:86:68:02:6e:36:4e:a3:39:b4:41:fb:e0:df:60:
                    12:0e:70:46:93:71:d0:c5:96:cc:f6:01:77:00:c8:
                    57:90:73:f1:db:cb:a9:60:25:9d:b9:15:9d:06:0c:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:E2:33:B3:99:47:FD:14:49:4C:02:FB:22:A4:20:F8:DA:32:08
            X509v3 Authority Key Identifier:
                keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3a:32:2f:d5:55:4d:85:b4:86:db:98:b7:62:b8:d4:e6:f4:
         1b:7b:71:07:ba:17:46:91:ad:d4:27:2c:3b:38:23:7f:90:12:
         67:9b:f4:dd:a1:f1:f3:37:cb:cd:1f:1d:cb:eb:21:08:e9:40:
         1f:0e:1c:10:c0:3a:54:39:01:34:b0:5d:3b:2b:61:16:ac:5e:
         16:67:22:70:55:9a:05:56:47:17:c7:e1:40:36:8f:dd:23:41:
         9b:ac:f4:20:e7:6c:a4:f5:11:3a:8e:e4:71:78:70:3c:20:fc:
         ab:d4:b5:91:68:96:3b:21:14:d4:49:fb:f5:44:6d:2e:3b:b2:
         26:c3:c5:0a:98:48:fa:50:2c:b0:bb:af:93:2f:01:e0:32:78:
         d2:f1:2e:61:97:1c:80:3c:66:84:02:e3:b3:9d:47:2b:ca:2c:
         80:88:62:21:34:1b:ea:09:ca:b8:c0:05:17:82:1c:ed:e7:a1:
         82:96:8f:19:1b:95:15:3d:f8:85:cb:55:69:48:d2:d6:4d:e6:
         be:42:d3:59:55:ba:11:02:c1:1a:0c:81:87:b5:1a:de:e6:88:
         29:12:5e:ee:e1:aa:a7:65:58:94:c5:ec:ee:07:d3:18:57:ef:
         b3:e9:d4:06:89:52:a0:3b:fb:76:9c:db:ee:48:08:f7:c3:b9:
         cf:e5:74:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1MzYxMTAvBgNVBAUTKDJBRTk4NTgxNUExMERENkQwNDUyM0ZDODFEOERBRkQ3
MjZCRTc4MTYwHhcNMjYwNDE3MDU1OTMzWhcNMjYwNDI0MDU1OTMzWjAYMRYwFAYD
VQQDEw02OWUxY2M0Ni1jOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkJWfscfEdv4XaVHjRaIy4on5Hv0hgDqkqKcvore4KOJ/W6QcMSE/sd53qu40
OdZI4IuAMz5x7HcwYqDlhvfoi2NPuxw7uTB6MaPfLMC6dtnvLFpI/rSvCAJ9DfXY
1AclTKhaYKiFaNgu8ilvn7+9dBZ4uksbHKbbT4EvO2oB/JY3lCCf9QlDcFMD0TUZ
HWDPSbB9NnkVIQ/a7N09fuLrjWlnw5Mo4CIs2kCmZD2VYX5SoQ9z3hzi+GyljTid
oBz6J3Ql3705Kscr5KwkkgGBhxbwhmgCbjZOozm0Qfvg32ASDnBGk3HQxZbM9gF3
AMhXkHPx28upYCWduRWdBgzvJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLre4jOz
mUf9FElMAvsipCD42jIIMB8GA1UdIwQYMBaAFCrphYFaEN1tBFI/yB2Nr9cmvngW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjUzNi85QTg2REJEMEM5
OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9LdW1GZ1ZvUTNXMEVVal9JSFkydjF5YS1l
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0t1bUZnVm9RM1cwRVVqX0lIWTJ2MXlhLWVCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjUzNi85QTg2REJEMEM5OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9LdW1GZ1ZvUTNX
MEVVal9JSFkydjF5YS1lQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPToyL9VVTYW0htuYt2K41Ob0G3txB7oXRpGt1CcsOzgjf5ASZ5v03aHx8zfL
zR8dy+shCOlAHw4cEMA6VDkBNLBdOythFqxeFmcicFWaBVZHF8fhQDaP3SNBm6z0
IOdspPUROo7kcXhwPCD8q9S1kWiWOyEU1En79URtLjuyJsPFCphI+lAssLuvky8B
4DJ40vEuYZccgDxmhALjs51HK8osgIhiITQb6gnKuMAFF4Ic7eehgpaPGRuVFT34
hctVaUjS1k3mvkLTWVW6EQLBGgyBh7Ua3uaIKRJe7uGqp2VYlMXs7gfTGFfvs+nU
BolSoDv7dpzb7kgI98O5z+V0Fw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:38 2026 by rpki-client